All releases of Openwall GNU/*/Linux

Release Notes: Relevant updates from Owl-current have now been merged into 3.0-stable, including rebasing of the kernel on OpenVZ/RHEL 5.9, GnuPG and xinetd updates, and minor bugfixes in glibc. The kernel is now compressed with Zopfli (pigz -11) instead of gzip -9. New ISOs and OpenVZ templates have been generated for i686 and x86_64.

Release Notes: The Linux kernel has been rebased on the latest from OpenVZ's RHEL5-based branch (RHEL 5.9-based currently), fixing a number of vulnerabilities including a PTRACE_SETREGS vs. process death race condition (CVE-2013-0871), which could allow for a local root compromise and OpenVZ container escape. GnuPG has been updated to 1.4.13 (fixing CVE-2012-6085). Assorted minor changes have been made. New ISOs and OpenVZ templates have been generated for i686 and x86_64.

Release Notes: The Linux kernel has been rebased on the latest from OpenVZ's RHEL5-based "testing" branch. binutils, tcsh, xinetd, and OpenSSL have been updated to new upstream versions, and assorted minor changes have been made to many Owl packages. The system has been rebuilt with the new binutils, which required some tweaks in various packages (now included, so further rebuilds work seamlessly), and new ISOs and OpenVZ templates have been generated for i686 and x86_64. Overall, this mostly conservative update is a precursor to a similar update to Owl 3.0-stable, and to more aggressive changes in Owl-current.

Release Notes: The Linux/OpenVZ kernel has been rebased on RHEL 5.8's. GCC has been updated to 4.6.3, and "gcc -Wl,-z,relro -Wl,-z,now" is now the default as a security hardening measure. The bootloader for the ISOs has been switched to ISOLINUX. Building of glibc's UTF-8 locales has been enabled by default. OpenSSL, lftp, strace, and hdparm have been updated to new versions. John the Ripper has been updated and is now built with OpenMP parallelization, AVX, and XOP support enabled. New ISO images and OpenVZ container templates have been generated for i686 and x86_64.

Release Notes: GCC has been updated to 4.6.1, and packages of GMP, MPC, and MPFR have been added (these are arbitrary precision arithmetic libraries required by recent GCC releases). The system has been rebuilt with the new GCC. VLAN support has been added to networking startup scripts. Timezone data has been updated, primarily for the latest reconsideration by Ukraine. Security fixes have been made to pam_env (not used on default installs of Owl, but available for use). The hardlink(1) program has been added. New ISO images and OpenVZ container templates have been generated for i686 and x86_64.

Release Notes: Relevant updates recently tested in Owl-current have now been merged into 3.0-stable, including rebasing of the kernel on OpenVZ/RHEL 5.7, an RPM security fix, and a timezone data update (critical for Russia and certain other countries, and now updated for the latest reconsideration by Ukraine). Security fixes have been made to pam_env (not used on default installs of Owl, but available for use). The hardlink(1) program has been added. New ISO images and OpenVZ container templates have been generated for i686 and x86_64.

Release Notes: The Linux kernel has been rebased on OpenVZ's latest stable from their RHEL5.7 branch. A tzdata package with up-to-date timezone data has been included. A security issue in RPM has been fixed, and certain minor and development-focused changes have been made, including changes in preparation for a GCC update to 4.6.x.

Release Notes: The 3.0-stable branch has been updated to include almost all changes made and tested in Owl-current in recent months, including new package additions, and excluding only changes that would break binary compatibility with the 3.0 release (specifically, Owl-current's OpenSSL update and related changes are excluded from 3.0-stable). New ISO images and OpenVZ container templates have been generated for i686 and x86_64.

Release Notes: The Linux kernel has been rebased on OpenVZ's latest stable from their RHEL5-based branch, and support for LSISAS8208ELP disk controllers has been added. strace, Nmap, John the Ripper, iputils, iproute2, and LILO have been updated to new versions. Security fixes and security-relevant enhancements to Owl's packages of the kernel, iptables, RPM, and glibc have been made. New ISO images and OpenVZ container templates have been generated for i686 and x86_64.

Release Notes: Since the 3.0 release, a Vim packaging error has been corrected, a vulnerability in the patch(1) program (CVE-2010-4651) and two vulnerabilities in OpenSSL (CVE-2010-4180, CVE-2009-0590) have been fixed, vsftpd has been updated to 2.3.4 (which fixes CVE-2011-0762), and patchutils was updated to 0.3.2.